Exploiting GPS vulnerability to Hijack Ships, Airplanes with $3000 Equipments

The GPS expert Todd Humphreys, professors at the University of Texas, demonstrated that just using a cheap apparatus composed by a small antenna, an electronic GPS "spoofer" built in $3,000 and with a laptop, it is possible to exploit GPS vulnerability to obtain control of sophisticated navigatio...

Exploiting GPS vulnerability to Hijack Ships, Airplanes with $3000 Equipments

The GPS expert Todd Humphreys, professors at the University of Texas, demonstrated that just using a cheap apparatus composed by a small antenna, an electronic GPS “spoofer” built in $3,000 and with a laptop, it is possible to exploit GPS vulnerability to obtain control of sophisticated navigatio...

Flame One Year Later

It’s been a year since the first reports of the Flame malware surfaced, and looking back at the 12 months since then, it seems more and more each day that the discovery of Flame should be seen as a seminal event in the evolution of malware. When Flame emerged in May 2012, some of the outside...

JBoss: custom authorization module implementations shared between applications

Red Hat JBoss Enterprise Application Platform EAP before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization module for a new application when an implementation is already loaded and the modules share class names, which allows local users to control...

Flatstick CMS PHP Hash Collision Denial Of Service Vulnerability

This CMS is fairly used in New Zealand. We can see through 'Google dorks' that this software is used by the following domains: org.nz ac.nz co.nz govt.nz net.nz school.nz Exploit Title: Flatstick CMS PHP Hash Collision Denial Of Service Vulnerability Google Dork: site:.nz inurl:index.php?pageLoad...

jruby: Murmur hash function collisions (oCERT-2012-001)

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

DEBIAN-CVE-2012-5374

The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service extended runtime of kernel code by creating many different files whose names are associated with the same CRC32C hash value...

SuSE 11.1 Security Update : expat (SAT Patch Number 6200)

This update of expat fixes the following bugs : - hash collision attack that could lead to exessive CPU usage. CVE-2012-0876 - expat didn't close file descriptors in some cases. CVE-2012-1147 - specially crafted xml files could lead to a memory leak CVE-2012-1148 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5869)

This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service. CVE-2012-0841 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data...

CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data...

jetty: hash table collisions CPU usage DoS (oCERT-2011-003)

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2012-0841

CVE-2012-0841 affects libxml2 up to version 2.8.0, where hash computation can be induced to collide, enabling context‑dependent attackers to trigger a denial of service via crafted XML data. The issue is repeatedly cited in multiple advisories and Nessus plugins, linking the vulnerability to the ...

CVE-2012-0841

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data...

Oracle Java SE 'MurmurHash' Algorithm Hash Collision DoS Vulnerability (Windows)

This host is installed with Oracle Java SE and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboraclejavasemurmurhashdosvulnwin.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE 'MurmurHash' Algorithm Hash Collision DoS Vulnerability Windows Authors: Sharath S...

Oracle Java SE 'MurmurHash' Algorithm Hash Collision DoS Vulnerability - Windows

Oracle Java SE is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Hash Collision DoS Vulnerability - Windows

Oracle Java SE is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MurmurHash algorythm vulnerabilities

It's easy to predict collisions...

CVE-2012-5370

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

CVE-2012-5372

Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...